Director of Product Security

Copilot said: Director, Product Security – Full-Time / Canada A fast-growing SaaS organization is seeking a Director, Product Security to help shape and mature security architecture across its cloud-based products, applications, and emerging AI-driven solutions. Based in Toronto, this full-time leadership opportunity is ideal for a highly technical security professional who enjoys partnering directly with engineering teams to build secure, scalable systems from the ground up. This role sits at the intersection of security, software engineering, cloud architecture, and product development. You'll have the opportunity to influence how security is embedded throughout the development lifecycle, helping teams design resilient platforms while proactively reducing risk before products reach production. The ideal candidate is a hands-on security leader who can balance technical depth with strategic influence, driving secure-by-design practices across a growing technology organization. Required Skills & Experience 10+ years of experience in cybersecurity, application security, product security, or security architecture roles Strong hands-on background reviewing and securing modern software architectures and cloud-native applications Experience building or leading secure-by-design initiatives within software development organizations Proven expertise conducting threat modeling, architecture assessments, and application security reviews Experience collaborating closely with software engineering, product, and infrastructure teams Strong understanding of cloud security principles across enterprise-scale environments Knowledge of secure development practices, DevSecOps methodologies, and risk-based security decision making Experience identifying architectural weaknesses and translating findings into actionable remediation plans Ability to communicate technical risks and recommendations to both engineering teams and executive stakeholders Desired Skills & Experience Experience securing distributed applications, microservices, APIs, and mobile platforms Familiarity with modern threat modeling frameworks and attack simulation methodologies Exposure to containerized, Kubernetes-based, or serverless environments Experience supporting security initiatives related to AI-enabled products and machine learning systems Knowledge of application security testing, penetration testing results analysis, and vulnerability management Experience establishing engineering security standards, reusable design patterns, and governance frameworks Industry certifications such as CISSP, CSSLP, OSCP, ISSAP, or cloud security certifications are considered assets Strong understanding of software architecture principles and modern engineering practices What You Will Be Doing Tech Breakdown 40% Product Security Architecture & Secure Design 35% Threat Modeling, Risk Analysis & Security Review 25% Cloud Security, AI Security & Governance Daily Responsibilities 40% Working directly with engineering and product teams to improve application and platform security 30% Leading architecture reviews, threat assessments, and security design initiatives 30% Developing standards, providing technical guidance, and influencing security strategy across the organization The Offer Up to $180,000 per year You Will Receive The Following Benefits Medical, Dental, and Vision Insurance Vacation Time Stock Options Bonus RRSP matching Current Vacancy: Yes Use of AI in Hiring: Yes Applicants must be currently authorized to work in Canada on a full-time basis now and in the future. Posted By: Matt Rehman

Lead the security architecture and secure-by-design initiatives for cloud-based products and AI-driven solutions. Partner with engineering teams to conduct threat modeling, architecture reviews, and establish security standards across the organization.

Requires over 10 years of experience in cybersecurity or product security with a strong background in cloud-native applications. Candidates should be proficient in threat modeling and communicating technical risks to executive stakeholders.

• Medical Insurance • Dental Insurance • Vision Insurance • Vacation Time • Stock Options • Bonus • RRSP Matching

• KubernetesPreferred

Identified from the job description. Confirm important requirements above.

• Product Security Architecture
• Threat Modeling
• Cloud Security
• Application Security
• Secure-by-Design
• DevSecOps
• Risk Analysis
• Architecture Assessments
• AI Security
• Vulnerability Management
• Governance Frameworks
• Microservices Security
• API Security
• Kubernetes
• Serverless
• Security Strategy

• Security & Safety
• Technology
• Software
• Engineering
• Management & Leadership

Minimum education

Professional degree

Minimum experience

10+ years

Apply by

Sep 24, 2026

Posting language

English

Working hours

40 hours per week

Seniority

Mid-Senior level